CVE-2023-41320
- EPSS 0.99%
- Veröffentlicht 27.09.2023 15:19:29
- Zuletzt bearbeitet 21.11.2024 08:21:03
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. UI layout preferences management can be hijacked to lead to...
CVE-2023-41321
- EPSS 0.27%
- Veröffentlicht 27.09.2023 15:19:29
- Zuletzt bearbeitet 21.11.2024 08:21:04
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user can enumerate sensitive fields values on resour...
CVE-2023-41322
- EPSS 0.21%
- Veröffentlicht 27.09.2023 15:19:29
- Zuletzt bearbeitet 21.11.2024 08:21:04
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A user with write access to another user can make requests ...
CVE-2023-41323
- EPSS 0.49%
- Veröffentlicht 27.09.2023 15:19:29
- Zuletzt bearbeitet 21.11.2024 08:21:04
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can enumerate users logins. Users a...
CVE-2023-41324
- EPSS 0.18%
- Veröffentlicht 27.09.2023 15:19:29
- Zuletzt bearbeitet 21.11.2024 08:21:04
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user that have read access on users resource can ste...
CVE-2023-41326
- EPSS 0.34%
- Veröffentlicht 27.09.2023 15:19:29
- Zuletzt bearbeitet 21.11.2024 08:21:04
GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. A logged user from any profile can hijack the Kanban featur...
CVE-2023-37278
- EPSS 0.22%
- Veröffentlicht 13.07.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:11:22
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched...
CVE-2023-36808
- EPSS 18.66%
- Veröffentlicht 05.07.2023 21:15:10
- Zuletzt bearbeitet 21.11.2024 08:10:38
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this...
CVE-2023-35939
- EPSS 0.18%
- Veröffentlicht 05.07.2023 21:15:09
- Zuletzt bearbeitet 21.11.2024 08:09:01
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a on a file accessible by an authenticated user (or not for certain actions), allows a threat actor to intera...
CVE-2023-35940
- EPSS 0.27%
- Veröffentlicht 05.07.2023 21:15:09
- Zuletzt bearbeitet 21.11.2024 08:09:01
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file allows an unauthenticated user to be able to access dashboards data. Version 10.0.8 contains a patch f...